220.202.112.134

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse confidence score ?
76% Critical
181 reports
66 reporters Β· latest 14 minutes ago
ISP China Unicom
Usage Type Fixed Line ISP
ASN AS4837
Domain Name chinaunicom.cn
Country πŸ‡¨πŸ‡³ China
City Changsha, Hunan

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Log in to view charts and search reports for this IP. Log In

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview
Account required for the enhanced features Log in Sign up

IP Abuse Reports for 220.202.112.134

This IP address has been reported a total of 181 times from 66 distinct sources. 220.202.112.134 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: United States of America with 27 reports; Mongolia with 7 reports; Germany with 4 reports. The most common categories in these recent reports were: Port Scan 42 times; Hacking 7 times; Web App Attack 5 times; Brute-Force 3 times; Bad Web Bot 2 times; Other 3 times.

Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
MikroTik Enterprise Honeypot
Port Scan
πŸ‡¦πŸ‡Ί LiftUp Hosting
Honeypot hit: Empty payload (likely service probe); 9446 [1] TCP
Port Scan
πŸ‡ΉπŸ‡· Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: FTP Probe (1972/tcp) [non-standard port]
FTP Brute-Force Port Scan
πŸ‡²πŸ‡³ Public CSIRT/CC of Mongolia
Honeypot hit: Empty payload (likely service probe); 2179 [1] TCP
Port Scan
πŸ‡ΊπŸ‡Έ www.nomadomia.com
Hack attack wp-content
Port Scan Hacking Bad Web Bot Web App Attack
πŸ‡ΊπŸ‡Έ OceanTreasure
Port Scan
πŸ‡²πŸ‡³ Public CSIRT/CC of Mongolia
Honeypot hit: Unauthorized traffic (16 bytes of payload); 8634 [1] TCP
Port Scan
πŸ‡©πŸ‡ͺ reznekcs
Blocked by UFW firewall
Brute-Force
πŸ‡ΊπŸ‡Έ xmission.com
Port Scan
πŸ‡ΊπŸ‡Έ Mark--
Unauthorized connection attempt detected port 8080
Hacking
πŸ‡ΊπŸ‡Έ sumnone
Port probing on unauthorized port 8983
Port Scan Hacking Exploited Host
πŸ‡ΊπŸ‡Έ MPL
tcp/7001 (2 or more attempts)
Port Scan
πŸ‡ΊπŸ‡Έ RAP
2026-09-22 03:16:10 UTC Unauthorized activity to TCP port 8089. Web App
Port Scan Web App Attack
πŸ‡²πŸ‡³ Public CSIRT/CC of Mongolia
Honeypot hit: Large payload (1388 bytes); 5025 [1] TCP
Hacking
πŸ‡²πŸ‡³ Public CSIRT/CC of Mongolia
Honeypot hit: HTTP/1.1 request on 33392 GET / Accept: */*; 33392 [1] TCP
Web App Attack

Showing 1 to 15 of 181 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

πŸ‡°πŸ‡· 220.126.8.143
πŸ‡¨πŸ‡³ 203.56.198.45
πŸ‡ΈπŸ‡¬ 194.164.107.5
πŸ‡§πŸ‡· 186.238.210.226
πŸ‡ΊπŸ‡Έ 184.105.139.90
πŸ‡ΊπŸ‡Έ 162.216.150.65
πŸ‡ΊπŸ‡Έ 162.216.149.229
πŸ‡¨πŸ‡³ 121.41.164.246
πŸ‡ΊπŸ‡Έ 98.254.92.240
πŸ‡·πŸ‡Ί 62.106.76.35
πŸ‡¨πŸ‡³ 60.214.154.254
πŸ‡¬πŸ‡§ 35.203.210.207
πŸ‡ΊπŸ‡Έ 18.97.26.94
πŸ‡¬πŸ‡§ 200.138.46.211
πŸ‡ΊπŸ‡Έ 174.138.45.45
πŸ‡ΊπŸ‡Έ 100.29.192.115
πŸ‡©πŸ‡ͺ 94.134.109.102
πŸ‡³πŸ‡± 89.21.67.154
πŸ‡¬πŸ‡§ 86.38.187.59
πŸ‡ΊπŸ‡Έ 64.227.20.180